search

Rebolon / php-sf-flex-webpack-encore-vuejs

A simple app skeleton to try to make every components work together : symfony 5.* (latest stable at the date, but work with sf 4 and 3.3+ if you pull the right tag), symfony/flex, webpack-encore, vuejs 2.5.x, boostrap 4 sass
https://www.richard.icu/
MIT License
114 stars 31 forks source link

[Snyk] Security upgrade vue-apollo from 3.0.0-rc.2 to 3.0.0 #215

Open Rebolon opened 8 months ago

Rebolon commented 8 months ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity") | **619/1000**
**Why?** Has a fix available, CVSS 8.1 | Cross-site Scripting (XSS)
[SNYK-JS-SERIALIZEJAVASCRIPT-6056521](https://snyk.io/vuln/SNYK-JS-SERIALIZEJAVASCRIPT-6056521) | Yes | No Known Exploit (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: vue-apollo The new version differs by 128 commits.
  • 8a55533 docs(readme): docs link
  • 428b5cb docs(readme): move link
  • a35f50d docs(readme): contributing guide
  • 5420630 chore: add test:ssr to test script
  • 4d15268 Create CONTRIBUTING.md
  • dc138f2 chore: Create CODE_OF_CONDUCT.md (#839)
  • 87785af chore: Update issue templates
  • b95388f fix: security issue
  • 198b383 test(e2e): manual add smart query: loadingKey
  • 14ea90a fix(ci): generate schema files
  • 4f9bba4 test(ci): fix yarn cache id
  • 73e970a test(ci): fix install
  • 6afceec test(e2e): SSR
  • af0b69d Merge branch 'dev' of github.com:Akryum/vue-apollo into dev
  • c3b840c fix(ssr): memory leak, closes https://github.com/nuxt-community/apollo-module/issues/231
  • 94bbb52 chore(deps-dev): bump vue-cli-plugin-apollo in /tests/demo
  • b7e214b chore(deps-dev): bump rollup from 1.24.0 to 1.25.1
  • 7733edc test(e2e): rename test.js to chat.js
  • 8da4777 test(e2e): errorPolicy support
  • ae4713e fix(smart query): handling errorPolicy, closes #526
  • ef9c7a0 docs(smart query): new `error` args
  • 932c5b9 feat(errorHandler): added options arg
  • aea6c93 feat(errorHandler): added vm, key, type arguments
  • b7642cd fix(ts): DataDef not defined error?!?
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/rebolon/project/16f76dab-7d62-4ad8-aefb-07836ed264c9?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/rebolon/project/16f76dab-7d62-4ad8-aefb-07836ed264c9?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"8fdf1c4f-c916-4bb3-aa1b-369bed5ed3d2","prPublicId":"8fdf1c4f-c916-4bb3-aa1b-369bed5ed3d2","dependencies":[{"name":"vue-apollo","from":"3.0.0-rc.2","to":"3.0.0"}],"packageManager":"npm","projectPublicId":"16f76dab-7d62-4ad8-aefb-07836ed264c9","projectUrl":"https://app.snyk.io/org/rebolon/project/16f76dab-7d62-4ad8-aefb-07836ed264c9?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-SERIALIZEJAVASCRIPT-6056521"],"upgrade":["SNYK-JS-SERIALIZEJAVASCRIPT-6056521"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","priorityScore"],"priorityScoreList":[619],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Cross-site Scripting (XSS)](https://learn.snyk.io/lesson/dom-based-xss/?loc=fix-pr)